Senior GRC Analyst

About Delinea:
Delinea is a pioneer in securing human and machine identities through intelligent, centralized authorization, empowering organizations to seamlessly govern their interactions across the modern enterprise. Leveraging AI-powered intelligence, Delinea’s leading cloud-native Identity Security Platform applies context throughout the entire identity lifecycle – across cloud and traditional infrastructure, data, SaaS applications, and AI. It is the only platform that enables you to discover all identities – including workforce, IT administrator, developers, and machines – assign appropriate access levels, detect irregularities, and respond to threats in real-time. With deployment in weeks, not months, 90% fewer resources to manage than the nearest competitor, and a 99.995% uptime, Delinea delivers robust security and operational efficiency without compromise. Learn more about Delinea on Delinea.com, LinkedIn, X, and YouTube.

Join our passionate, global team at Delinea and help us make the world a safer and more secure place. Our success is driven by world-class product leadership, outstanding engineers, and strategic investment from TPG. We value diversity, innovation, and a culture of respect and fairness. If you're ready to push boundaries and challenge the status quo in security, we want to hear from you.
 

Apply today to help us achieve our mission.

Summary:

Delinea’s Cybersecurity organization is seeking a skilled Senior GRC Analyst to play a key role in ensuring Delinea’s alignment and adherence with policies, practice and maintaining the company’s cybersecurity risk management framework across both commercial and regulated public sector environments.

This role requires strong cross‑functional partnership to ensure compliance and drive continuous improvement, including alignment with U.S. public sector standards such as FedRAMP and GovRAMP, as well as broader risk‑management and improvement initiatives.

This is a remote position based in the U.S. and reports to the Director of Governance, Risk, and Compliance.

What You'll Do:

• Enforce cybersecurity Process Risk and Control frameworks that are rationalized against applicable laws and standards.

• Lead the FedRAMP Moderate and/or High authorization program and ongoing compliance

-Coordinate with 3PAOs, sponsoring agencies, and internal stakeholders during initial assessment.

-Assist in developing and maintaining FedRAMP-required documentation.

-Coordinate evidence collection for RAR, SAR, and continuous monitoring.

-Track security control implementation with engineering and IT teams.

-Maintain and update the POA&M and remediation timelines.

-Help manage ongoing FedRAMP continuous monitoring activities (e.g., monthly scans, annual assessments).

• Perform cybersecurity risk assessments and maturity assessments.

• Conduct control readiness assessments to evaluate design, implementation, and effectiveness.

• Execute strategy for improving efficiency and ensuring organizational procedure alignment to maintain compliance with industry standards.

• Lead continuous control monitoring activities using GRC and compliance automation platforms.